Module maintenance

Expand description

Runtime-neutral, fail-closed authorization for maintenance operations.

Structs§

MaintenanceAuthorizationContext: Authenticated request facts supplied by a service composition root.
MaintenanceAuthorizationGrant: Auditable authorization result carried into a maintenance operation.
MaintenanceAuthorizer: Stateless fail-closed maintenance authorization engine.
MaintenancePolicy: Versioned fail-closed maintenance policy.
MaintenancePrincipalBinding: A principal-to-role binding.
MaintenanceResourceBudget: Bounded resources available to one authorized checkpoint operation.
MaintenanceRoleGrant: Capabilities delegated to one maintenance role.
ValidatedMaintenancePolicy: A maintenance policy whose complete semantic contract has been validated.

MaintenanceAuthorizationDenial: Fail-closed maintenance authorization denial.
MaintenanceCapability: A privileged production operation controlled by the maintenance policy.
MaintenanceRequestClass: Classification applied to every maintenance request before dispatch.
MaintenanceRole: A role that can be bound by the maintenance policy.